Re-signing packages for caches

[aanderse]

@colemickens

The only thought I have is there’s some path by which the narinfo is updated in one place (on disk?), and maybe the signatures are also copied to sqlite and they’re not copied whenever the path already existed.

The problem with that, in my scenario, is that I’m using attic and attic signs narinfo files it serves on the fly… right @zhaofengli?

@colemickens

Seems rather bad

I agree. Any and all help is greatly appreciated